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(54) TRANSMISSION SYSTEM HAVING TERMINAL EQUIPMENT PROVIDED WITH 
PREPAID CIRCUIT 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a 
connectable circuit formed from an SIM card 
having no demerit that damage such as changing 
contents through illegal trick is easily received. 
SOLUTION: This transmission system has plural 
terminal equipments 1, 36 and 37 respectively 
provided with one connectable circuit 30 storing 
prepaid data at least. The terminal equipment 1. 36 
and 37 is provided with a means for directly 
changing these prepaid data corresponding to 
communication. Further, a protecting means is 
provided for protecting these data concerning this 
prepaid state. Thus, a prepaid card can be used for 
a GSM network or any similar network. 
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. * NOTICES* 

JPO and INPIT are not responsible for any damages caused by the use of this translation. 

l.This document has been translated by computer. So the translation may not reflect the original precisely. 

2 **** shows the word which can not be translated. 

3. In the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim l] It is the transmission system characterized by to include the protection means for guaranteeing the data 
integrity concerning [ on the transmission system which has two or more terminal imits which can perform the 
communication link including the circuit where prepayment data are contained in it, and in which at least one 
connection is possible, and a means to change the above-mentioned prepayment data directly according to a 
communication hnk, and / the above-mentioned terminal unit ] prepayment. 

[Claim 2] a transmission system including the relay center which interconnects a terminal imit according to claim 1 - 
setting - accounting - a rate the transmission system characterized by defining data on the level of the 
above-mentioned relay center. 

[Claim 3] a transmission system according to claim 1 " setting -- accounting - a rate - the transmission system 
characterized by defining data on the table contained in memory on the level of each terminal unit. 
[Claim 4] It is the transmission system characterized by being formed by the detection means for the 
above-mentioned protection means detecting the above-mentioned employment data integrity in the transmission 
system which operates gaining assistance of the employment data with which the terminal unit given in claim 1 
thru/or any 1 term of 3 is memorized in memory. 

[Claim 5] It is the transmission system characterized by being formed by authentication means to attest a terminal 
imit through the circuit in which the connection for permitting a communication Hnk when it is admitted in a 
transmission system given in claim 1 thru/or any 1 term of 4 that the above-mentioned protection means is Shinsei is 
possible. 

[Claim 6] It is the transmission system characterized by being formed by the protection means for the 
above-mentioned protection means protecting the data exchange between a terminal unit and a connectable circuit in 

a transmission system given in claim 1 thru/or any 1 term of 5. 

[Claim 7] It is the terminal unit characterized by to include the protection means for guaranteeing the data integrity 
concerning [ on the terminal unit for which the commxmication hnk including the circuit where the prepayment data 
about a communication Link are contained in it, and in which at least one connection is possible, and a means to 
change the above-mentioned prepayment data directly as a communicative fimction is exchangeable, and / this 
terminal unit ] prepayment. 

[Claim 8] It is the terminal unit characterized by being formed by the detection means for the above-mentioned 
protection means detecting the above-mentioned employment data integrity in the terminal unit in which the 
actuation becomes settled with the employment data memorized in memory according to claim 7. 
[Claim 9] It is the terminal unit characterized by being formed by authentication means to attest a terminal unit 
through the connectable circuit which permits a communication link when it is admitted in a terminal unit according 
to claim 7 or 8 that the above-mentioned protection means is Shinsei. 

[Claim 10] It is the terminal unit characterized by being formed by the protection means for the above-mentioned 
protection means protecting the data exchange between a terminal unit and a connectable circuit in a terminal xmit 
given in claim 7 thru/or any 1 term of 9. 

[Claim 11] This approach is each next phase, i.e., >, setting the actuation including the prepayment data which 
specify a certain fixed balance to the prepayment approach for transmission systems of having two or more terminal 
units which the connectable prepayment circuit specified by software has combined with it by plug insertion. The 
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l)eginning phase which checks the integrity of the software of a terminal unit of operation, and checks the connectable 
type of a prepayment circuitJ 

• Sending-out phase sent out to the prepayment circuit which can connect the key from a terminal unit; 
Connection setting phase in comparison with the minimum tariff which should charge the balance contained in a 

connectable prepayment circuit; 

• the rate under communication link which performs pulling down from the contents of the balance - the prepayment 
approach characterized by having accounting phase; and changing. 

[Claim 12] It is the prepayment approach characterized by being that from which prepayment data are periodically 
pulled down in a certain pulling-down unit in the prepayment approach according to claim 11. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 

[0001] 

[Field of the Invention] This invention relates to the transmission system which has two or more terminal units 
which can perform the communication link including the circuit where prepayment data are contained in it, and in 
which at least one connection is possible, and a means to change the above-mentioned prepayment data directly 
according to a communication link. 

[0002] This invention relates also to the prepayment approach performed again with the terminal unit suitable for an 

above-mentioned system and such an above-mentioned system. 

[0003] 

[Description of the Prior Art] This kind The radical Motohara rule of the network of a GSM mold is spreading all 
above-mentioned equipments generally widely first. And it is in a general target. A SIM card or micro Using the 
connectable circuit formed with the chip called a SIM card, it is made the thing for each people to a user, and 
equipment is **. A SIM card or micro Once a SIM card is inserted in a terminal unit with a plug, it permits carrjdng 
out an identification check and attesting a user to a network. 

[0004] Commercial company who contracts management of a subscriber for a network management person's profits 
(SCS) It joins. A SIM card can come to hand. Not only subscription business but SCS also manages daim business 
based on the data sent by the network management person. 

[0005] Such management business is comparatively expensive. Not only it but the risk on financial affairs cannot be 
disregarded, namely, :some people's subscriber is that of "forgetting or neglecting" about paying for the biU. 
[0006] It reaches a network management person for these reasons. SCS is interested in installation of the 
prepayment network service according to the idea of the telephone card used by the public telephone booth today. 
Prepayment type A SIM card permits the communication Hnk corresponding to the total nimiber of units, or the 
number of predetermined units. '• from which this concept also hangs down the following various advantages • 
Simplification [ of the distribution process of a SIM card ]; 

• Increment in a subscriber number of registration; 

- Bill issue is needlessness.; 

- Reduction of management costs; 

• Progressive source of revenue. 

[0007] the above prepayment systems - the [ PCT patent record ] - it is known from WO 95/No. 28062. However, a 
means by which it may be intercepted by those to whom this system has a remarkable faudt, I hear that a connectable 
circuit tends to suffer damage, and it has it, the contents may be changed into by the unjust artifice, and exchange of 
the data between this circuit and terminal unit has malice, and it means unjust action is offered. 
[0008] 

[Problem(s) to be Solved by the Invention] This invention proposes the system of the type of a publication at the 

beginning which does not have an above-mentioned fault at least. 

[0009] 

[Means for Solving the Problem] Therefore, the system of a type given in the beginning is characterized by including 
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a protection means for the above-mentioned terminal unit guaranteeing the data integrity about prepayment. 
[OOlO] This invention-idea consists of all the information about prepayment data being protected and those who plan 
^ injustice by it making impossible the activation top of deceiving that communication link cost. 

[0011] One mode of this invention by the system of the above-mentioned type on which a terminal unit functions 
gaining assistance of the employment data memorized by memory is characterized by being formed by the detection 
means for the above-mentioned protection means detecting the above-mentioned employment data integrity, and this 
mode is not certainly changed by those to whom those data mean injustice. 

[0012] According to another mode of this invention, the above-mentioned protection means is formed by means to 
attest a terminal \mit in the circuit in which the connection for permitting a commimication link is possible, when 
being Shinsei is admitted, and those who plan injustice avoid possibility of plug connection of the circuit in which 
other connection is possible being made, and aiming at profits to him about communication link cost, 
[0013] 

[Example] Hereafter, the above of this invention and other modes are explained to a detail by an example and the 
drawing. 

[0014] The system shown in drawing 1 contains what attached 1 and a number with the pocket form wireless 
terminal unit. This equipment It has the antenna 5 for sending and receiving an electric wave between the relay 
centers 8 of the wireless network of a GSM mold. This equipment 1 includes a loud speaker 10, a microphone 12, a 
keypad 15, and the visible display 17. Having surroimded with the broken line expresses the electronic part 20 in this 
equipment. According to the GSM criterion (J-ETS 300 045-1 or ETS30), they are an ISO format or a plug-in format. A 
SIM card or micro A SIM card is prepared and, as for this, 30 and a nimiber are attached by drawing 1 . This card has 
a connector 31 and it contacts another [ which forms some equipments 1 ] contact 35. Another [ this ] contact 35 is 
shown in drawing 2 . Equipment 1 and other equipments 36 and 37 of the same structure are further contained in the 
system of drawing 1 . 

[0015] The structure of eqvdpment 1 is further shown in a detail at drawing 2 , and the same number as what has the 
same drawing 1 and the same drawing 2 is attached. Drawing 2 shows the structure of the electronic part 20 to a 
detail. 

[0016] This electronic part 20 The transmitting assembly 40 and the receiving assembly 42 for sending and receiving 
the various data usually used with a GSM technique, the data which will come from a microphone 12 if it says in 
more detail, and the data about a loud speaker 10 are included. The microprocessor assembly 50 is the receiving 
assembly 42 in many following elements, i.e., ^transmitting assembly 40 Hst, Keypad 15, \^sible display 17, And 
management of data- exchange; of module SIM 30 is guaranteed to connector 35 Hst through 31. Furthermore, if it 
says in detail, this microprocessor assembly 50 will be. An EPROM mold is made suitable and it has read-out / 
write-in memory 55 which means that prepayment data are included in it. 

[0017] If this system is based on this invention Accounting to a commimication Unk is wanted to come to allow 
through a SIM card. 

[0018] therefore, such a system -- following requirements' - - to which a SIM card can fail (accuracy of accounting 
count) to subtract only the amount of money corresponding to the offered service the ** by which the unit to which a 
user corresponds dropping [ lengthen ] is not made - service " it cannot receive (with no unauthorized use) " it is 
made satisfied Radical Motohara ** of this invention^ - A SIM card has what can perform re-payment, and the thing 
which is not made, when it is paid in advance per unit and the balance is used up.; 

- Terminal unit It charges by the rate of a SIM card.; 

• Td the terminal unit which can charge a card on a network Only when a SIM card is inserted A SIM card can be 
used.; 

- A terminal unit contains the apphcation of an algorithm required for the prepayment in the processor which 
guarantees activation of the software function of a terminal unit and which was left in trust, and the environment 
where it protected.; 

- The processor left in trust can forbid operation actuation, when the integrity of the software of a terminal unit can 
be checked and it is changed.; 

- A code protocol is a terminal unit. It permits estabhshing the link where it was entrusted between SIM cards.; 

• It protects in code to forgery of arbitration. The original balance of a SIM card is read by the terminal unit.; 
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- Terminal unit It can guarantee that it is the true exact fruit of the balance of a SIM card, and, in the case of 
insufficient funds, a communication Hnk can be forbidden.; 

■ Terminal unit It which calculates the rate of SIM shaU be based on the data with which it was based on the rate 
data of phonecall charges sent from a network at the beginning of communicative, or the form of a table was 
initiahzed beforehand.; 

■ Terminal unit the rate by which the address is carried out to a SIM card -; from which directions are protected in 
code to forgery of arbitration 

• The rate of a SIM card is protected in code to forgery of arbitration. It can check through the balance of a SIM card.; 

- Processor to which the terminal unit was entrusted The code exact private seal of the effective rate of SIM is 
guaranteed.; 

■ Terminal unit A communication Hnk is cut when the balance of a SIM card is used up. 

[0019] Drawing 3 and the drawing after it are drawings showing operation actuation of the system to which the 
above-mentioned requirements are satisfied. 

[0020] Operation actuation is divided at four phases expressed with the flow chart shown in drawing 3 and the 
drawing after it, respectively, these flow charts " the following two parts, i.e., - Partial; named TERM about 
operation actuation of a terminal unit 1, and - It is related with SIM card 30. It is formed of partial; named SMC. 
[0021] This step KO from which the phase shown in drawing 3 begins at step KO is a step which supplies a power 
source to a terminal unit, and the operation of the following beginning consists of checking the integrity of the 
software of a terminal unit (step K2 reference). It is French patent ****** for which the applicant same about this as 
this application appUed on February 7, 1996. It is indicated by 96 01 478 No. By the next trial (step K5), if it is shown 
that software is invaded, it will progress to step K6 and a halt of a terminal unit 1 will be directed. Supposing 
software is unhurt It is guaranteed that operation actuation of the terminal unit by the SIM card is attested, and 
management of the rate of a commiuiication hnk unit can do a terminal unit,. This is performed by 
challenge/response mechanism. 

[0022] It is an initiation instruction because of this purpose, (step KIO) It is given to SIM card 30. Then, ** A SIM 
card starts (step LO). ** After SIM starts, a terminal unit is step K12. Request of a random number It sends out to a 
SIM card. ** SIM answers by receiving the request and generating a random number As (step L2). A terminal unit 
works through Key Ks and the encryption algorithm concerning several S, and is this algorithm. It is sent out to a 
SIM card, (step Kl4) . This card answers several S received and performs an operation. This operation is prescribed 
by the encryption algorithm described as Ag (Kv, S) into step L4. This algorithm If the RSA coding approach is 
included, two keys Ks and Kv will be used, these keys - if a symmetrical approach like the DES approach is used 
it is the same if it becomes. Next, they are two numbers As and As' at step L6. It is compared. If this comparison 
shows a difference, a process will stop (step L8). A card is blocked until it starts next time. 

[0023] the following step " traditional - network ; which consists of making SIM attest - this is called A3 AS 
(indicated by the GSM criterion) An algorithm is used, the standard standard procedure for GSM - it is " step LIO 
**** - this - AgA three AS (..) - writing - **** - ** It is the key Ki of SIM. If Authentication of the terminal \mit by 
the SIM card is completed correctly, and if there is nothing, it will call at a network. It is unrealizable, consequently 
processing of recognition of SIM is a network. It wiU be understood that connection of this handset that cannot 
perform pulling down SIM wiU be refused. Therefore, a terminal unit is delivery to a card about a random number Ar. 
(step KIS) Then, a card calculates several R as the function of A3AS algorithm, and a fimction of Key Ki as mentioned 
above. This number is sent out to a terminal unit and is further sent on a network, (step K20) . It is judged [ by which 
the terminal unit has been received, for example / or or ] on the level of a relay center 8 whether refusal was carried 
out. 

[0024] The 2nd phase shown in drawing 4 is a terminal unit. It is the phase which establishes the random session key 
which means protecting exchange between SIM cards. A terminal unit generates the random session key Ks. (step 
K30) . Encryption of this key is performed with the algorithm of a RSA mold, (step K32) . Request whose key Kenc 
generates a session key It is used for asking for the message C sent out to SIM. (step K33) . SIM card The key Ks 
which decoded and asked for Message C using an RSA algorithm and its key Kdec is memorized, 
notes- - the layout of this and the equivalent - for example, - Based on the algorithm of symmetry like a DES 
algorithm, it is possible. In that case, Key Kenc and Key Kdec will become the same thing. 
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[0025] another deformation of activation of a symmetry algorithm " for example, - a DES algorithm - terminal unit 
It consists of using the random number given by the known key of a SIM card, and two existing parts. A terminal unit 
i generates a random number Am and memorizes it. It sends out to a SIM card. A SIM card generates a random 
number As and sends it out to a terminal unit, and Ks-Ag (Key, As | | Am) is calculated, it is memorized, and a 
terminal unit specifies a logic chain operation further again. A terminal unit also calculates Ks=Ag (Key, As I I Am) 
further to them, after receiving As to it and coincidence. 

[0026] In the exchange, the terminal xinit beforehand known for the way with few artful extent reaches. The key Ks of 
a SIM card can also be used. 

[0027] The 3rd phase is a phase which takes asking for a communicative parameter into consideration, and it checks 
whether it is enough to the communication Knk by which the balance of the unit on a card is established. This phase 
is explained by drawing 5 . 

[0028] after starting a communication link (step K40) communication link accounting - the parameter of a rate is 
called for based on the table beforehand carried in the network operator or the terminal unit. This is step K42. It is 
shown. Subsequently, approach Prd It is started and this permits recovery of the balance of the card with which the 
guarantee of all security was made. When, as for this approach, a random number Ac is generated (step K44) 
Starting, this random number Ac is Balance Sid. It is added to the receiving request, (step K46) . If it does so A SIM 
card is based on a numeric value Ac. It is tol = AlgD, however (Ac, Ks) ** which calculate the certificate and the 
balance which are called MAC in the following way, and Ks is taken as the session key established before.; 
m2 = AlgD (balance (+) ml, Ks) 

however, **, (+) a operator called an exclusive OR (EXCLUSIVE-OR) is expressed - AlgD If the algorithm of 
arbitration is further specified in this case the result which expresses a DES algorithm and forms Ms = MAC " m2 It 
becomes four leftmost digit cutting tools. This is step L30. It is expressed, next - a SIM card - a random number Ad - 
generating - (step L32) this - after - a rate - it is used for a request. And finally a card sends out Sid (balance), Ms, 
and the new random number Ad to a terminal unit, (step L33) . The balance and Ms If it receives, a terminal unit is 
based on the numeric values Ac and Ks to which the integrity was estabhshed by the next re-calculation, and it 
established :ml'= AlgD (Ac, Ks) by itself, and is;m2 - AlgD (balance (+) ml, Ks). It checks by doing; re -calculation of 
based on the balance which SIM sent out. It becomes four leftmost digit cutting tools of Ms -m2'. This is step K48. It 
is expressed. Subsequently, step K50 Ms* and Ms Equivalence is examined. When it was equivalence, it received. The 
integrity of the value of the balance of SIM is proved. If it is not equivalence, a communication link will be interrupted 
in that case, (step K5l) . This actually has the suppression effectiveness that an unjust intention makes 
communicative establishment impossible as a result. To a degree (step K52) The rate Db by which it is charged is step 
K42. It is calculated based on the received parameter, this balance Db and the minimimi " comparison with a rate 
(step K54) The judgment of whether to make a communication link estabhsh can be performed. If a communication 
Unk is interrupted, it will be step K55. It goes. If a communication hnk is continued, it wiU go to step K56, and 
allocation of Variable OSLD is directed there. It is made for this variable to have included the numeric value of the 
balance which comes from a card, terminal unit the random number Ad received from SIM ~ memorizing - a next 
rate " it uses as well as a request. 

[0029] The flow chart of the 4th phase is shown in drawing 6 , and this shows the rate charged during a 
communication Unk at a card, this phase " a certain accounting - it starts at the moment of a rate being charged 
(step K60) . this initiation - for example, " periodic a rate " it is made by the terminal unit which it is going to 
make Unit Db charge. An accounting operation is step K62. Certificate explained (one MAC) It protects. Subsequently, 
the request to a rate is sent to a SIM card, (step K64) . There, certificate Md' is defined based on the selected key Ks 
(step L50). (step L5l) Certificate Md with which it was sent out fi-om the terminal xmit It is compared, (step L55) . If 
the result of a comparison is good, it is step L60. It progresses and operation actuation of the new balance is directed 
there. It is appropriate to check that this new balance is the number of pluses, and it is step L62. It performs. A card 
is blocked if the balance is the number of minus, (step L63) . Any operation will not be performed, either, if the 
balance is the nvimber of pluses. This card is declared to be O.K. (step L65) It is sent out to a terminal imit. 
[0030] A terminal unit is this declaration when it does so. (step K65) It is ** by examining. It is possible to check 
whether a SIM card is effective. If If the SIM card is blocked, since it is not declared as O.K., a communication hnk 
stops, (step K66) . If It is Approach Prd if a SIM card is effective. By performing, a process is continued and recovery 
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of a balance value is permitted. The check of a true rate is performed, (step K70) Variable OSLD is step K75. It is 
updated. If a check shows that a rate is not carried out, a communication link will stop, (step K71) . 
i [0031] This invention It will be appUed also to the terminal unit used in the environment where an application field is 
-found out by **, such as fields other than the network of a GSM mold especially a telephone network, the data 
transmission network of DCS 1800 type, mount or a fixed-Hne telephone terminal unit (coin box set), facsimile, data, 
or a picture transmission terminal unit, and neither protection nor a monitor is carried out. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing l] Drawing 1 is drawing showing the system by this invention. 

[Drawing 2] Drawing 2 is drawing showing the pocket form wireless terminal unit suitable for the system shown in 
drawing 1 . 

[Drawing 3] Drawing 3 is drawing showing the 1st flow chart which meant explaining operation actuation of the 
system by this invention, 

[Drawing 4] Drawing 4 is drawing showing the 2nd flow chart which meant explaining operation actuation of the 
system by this invention. 

[Drawing 5] Drawing 5 is drawing showing the 3rd flow chart which meant explaining operation actuation of the 
system by this invention. 

[Drawing 6] Drawing 6 is drawing showing the 4th flow chart which meant explaining operation actuation of the 

system by this invention. 

[Description of Notations] 

1 Pocket Form Wireless Terminal Unit 

5 Antenna 

8 Relay Center of Wireless Network 
10 Loud Speaker 
12 Microphone 

15 Keypad 

17 Visible Display 

20 Electronic Part in Pocket Form Wireless Terminal Unit 
30 SIM Card 

40 Transmitting Assembly 
42 Receiving Assembly 
50 Microprocessor Assembly 
55 Read-out / Write-in Memory 



[Translation done J 
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[0 0 13] 

[0 0 1 4 ] ^ 1 {C^-r5/XxA«. »!Hiffl5»«*S 50 
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HTl i:S^^{tLfctco%#tyo il©^H« CSMg/O 

46<07>'r-f 5^}toTV^5o COgBUi. •7'i'KX 

kf-*10. v-r^'D7;l->'12. +'l'>'^y K15. SO^Blii 
x-f xyu-flT^^tJo 5Sl^-eiMA.T'^?.Ot±ri^^ia{|*| 
tfi5«^{t:g|?5^20^g-ro GSH^¥(1-ETS 300 045-1 

Xt4ETS30)tc<};ntf. myt~-r y hxii-fy^^y 

Atffljg^n. ctum 1 T'{i30i:S^*H>f^nTi/''5o 
i:cD*-Ftin^^i7^3i^lt-^, ^tiimmico-^^ 

IC. ggl i:|i|1i©«lii<Dffl©ga36&0'37t#Sn 

[0 0 15] mzicumiinMmfmicmmiCTjk-^ 

i>c m 2 (i-a^lt;g(5:^20cD«ii;S:i¥^{c.T^-rc 

[0 0 16] c<Dm^it^2Joi,i Gsmrnvmim^-^'b 
isig-r § 46«. miBT-tyyvAot 7 -t > 'j 42 

t^r-g-tTo V't'i'a7'D-b-;''tJ-7-try7"U50A^ «TO 
IgxU^y h-r^a:^-^ : )i{l7-b>7'J40Mmc§f|7 
•b>7"'J42, ^^'^^yHl5. Rliir'-i' X^Ufl?, RXJ 
3^.^^J35Mmc31^/M^Tt>/*a-;l'SIM 30i:©x- 

v-r^'D7D-tr7-9-7-tr>'7';50{i EPROMSJ^&iifJii: 

[0 0 17] iS>'X7^jU«*f8HfltJ;?.^P,{f SIM;^- 

[0 0 18] t»eor^<0J;3'S:v'X7"A{i:i^<DS^^ 
ft: 

■9--trx^^(:^5c:t«T-t%(/> (^lEISfflilU) . ^ 

iz-'^o ft t tStAV'Ji^ttDTt 5 1 <D i: T-t^i^t O i: 
A^?. : 

SIM*- KA'«Jf A^nfci: SIM*- K«<gfflT 
t5 : 

- «*^B«. 4S*SBoy7h'^7x7ili6©^fT% 

t5it§HU&t^{i:i2.S^7;l/d'U XA©77''; -J—v-a y 
; 
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- Bt#7°Dh3;UA\ affl^SBt SIM*- hTa<^fIK 

^ n/i: 'J > ^7 ^miLt ^ct ^mmt § : 

IE u, $ fcaiB;^s©^^{c{ia{i^«ifr 5 c t fs^r- 

- J;oT SIM*- Ktc7 F^X^tl§if-■^$ 
liSnrv^i) SIM*- F«.!5%/rUT^x-y ^T't 

5 ; 

- 4S*S{114 SIM*- K<DSiS*^^ i/^^o i: t tc(4 

coo 1 9] msRu^nmmmmii. ±tmM^w 

[0 0 2 0] jaiEfjmiia3&i>'^ni-xtgcDiasfc^v$ 
n s 7 D - f- ^ - h T -^-n-f ^ 4 7 X - X 

- SIM*- HSOtCMtS SKh^m^^^ : fC<to 
[0 02 1] lll3(C^-r7x-XfiXf--y7'K0T'if&$ 

'itmmt^ctti^^iS,^ (Xr-y/K2#B§) 0 cntc 
■^^^Ta*t^illi: |Hl i;ttlgiAfi:«J; t) 1996^^ 2 ^ 7 Bfctts 

ia^nfc7^>xffl#i^i±5MS 96 01 Anmmm^n 

K6^CJt^T4S5l5ge i co^ihA^jt/T^^n^So t lv 7 h 

•i7x7A^Mir'^-5^?)(4\ SIM*- Ktc J;5!ffi5S^B 

[0 0 2 2] i:<7)g6q©fci6(cr^<i&^^ (Xx-y7KlO) 
SIM*-F30fC^^6ni.o ^cT'iS SIM*-FA^X 
^-FfS (Xx-y7L0) o IS SIH*"ftt-^±*^o/-diT' 

^■^mmaxT-^y-nn T'ass[«3^ siM*-Ffc5M 
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m^. m siM(4^cosi»^stt85oTa?SAs^g£fig-r 

§ C t J; 0 {S^-r 5 (X r >y T'Lii) 0 «(J*giWti 
^7;l'd"'JXAt4 SIM*- FtCj^tU^nS (Xf--y7T(l 

4)„ m- Fasitijjo s fcts^ LTiiia?*?^if -r 

5c (1 <Digg{4X-r «y 7'L4rt{CAg(Kv. S) 1 12 1 /cBt^lk 

7 -'I/ 3 U X A J; o TM^ 5 n 5 „ t Li^ 7 3 U X A 
A^' RSAT?^{b73?4;&^tfa: e. tf 2 OO+^Ks&t/KvA'iffl 

10 ^:^aA^fflt/^p.n?.^?)ff, iii-(otcDT-$)i)„ ^^fcx 

T«y7'L6T'2 0(Dms. As mfJ^nSo I^Jtl$A'«ffl 
S^^-r^P-CTStiffik-rs (Xx-y^'tS) „ *-F 

[0 0 2 3] ^<D^^cr)Xf->y7'«eiifcW(C:^7 F7-^ 
ii^ SIM^,liriiE-r^<i:a{c^-li-5c t*^^fi!c5 ; c^fi. 

kmtmin^(Ksmmcmw.tnx\>-^:^) 7/i:3v x 

A^&^Iffl^S CSMlf*pO<fSpW¥)iiT-*oT. XT--y7' 
LIO (C{icn«AgA3A8(..)i:fif<^^Tfe»5. fiS SIMcO+'T 
KiT'feSo fet SIM*-F»c<J:5i^*^B«D^IE*^EL/ 

M4JI|93T't%(/\ ^>7F7-^ti Sim 

aa!0(Ar^:*-F(CjMO (Xr-y /K18), ■r5^*-F 
±^0<k 9 {CA3A87;l/=f U XA<DMISRt;+-l'Ki© 

miiC:^-y h'7—>±ltCM^tl^ (Xr>y 7K20)o 
30 [0 0 2 4] 04{C^-rm2O7x-X(4. Jffi^^Ht 

SIM*- FF^(DSg5^K§i8-r ci i:^icii-r55y^*A 

■fe'yi/3>+'i'^Siif §7x-XT-S?)o 4S*SB(i 
5>^^A-tr-y>'3y+'fKs^:4fig-r5 (Xx-y7K30)o 
CCD^-rOBgliJ-ftti, t?IJ;^.(fRSAfa<D7;l/d"U XATJ^' 
tT^nS (Xr<y:^32)o +-YKenc/)^ •b<yv'3>+-< 

<DI,Ci^t>tl^ (XT-yyK33)o SIM*- F(4 RSA7vl/zi" 
U XA t ^tO+^Kdec^ffl V^T^ -y -b-i^C U 

40 a : - cni:|riiii<0U'l'7'i/ FA'^iJIJAtf DES7;l/rfU 
XAO<t 3 *5tt*4;©7;l/3 U XA^^:S■:3^/^TPI^T$. 
?.o ^©«^tCfi+f'Kenct+-l'Kdeci:ttP-cDtOfc 

[0 0 2 5] ?tli;7;l/druXA(D||tfot -5 i 

#ijx.tf DES7;L'ri"';XA(i> iS^SBi: SIH*-F 

^^ffll/^SCtA^^^So ilS*KB«aitAin**figL, 
^tl^ieiiLT SIM*- FtCiMffiT'So SIM*-F«a 

50 Ks-Ag(Key, As II Am) 



(5) 

7 

Ks=Ag(Key, As || Am) 
[0 0 2 6] 3S^^rtT'{iS^WOSaA^J;0'>:ftl,^-^ 

[0 0 2 7] ^3<D7x-X{i. ji{i©>'<5y^^^i6 

SCfc^#li{CAn2>7x-XT-S'3. ^n{i*-F± 10 

[0 0 2 8] iifi^Bf^tebfcmT- (X-r-yyK40)jiMli 

prd *''ijpi$&?n. ztiiit^-z(D'^±mimumt)''^i-s 

7T(46)„ ^d-rSt SIMA-K{ilSffiAc{i:S-r5< MACt 
ml = Alg» (Ac.Ks) 

§ ; 

iii2 = Alg, (+) rnl.Ks) 

fiLST\ (+) «Sffl!l6^fi™afP(F.XCLUSlVE-0R)i; 1/^-5 

Alg» tiffiS((D7yL'3UXA:^, CCDt^ • 
^MfCiit^-rntf DES7;l/d'';Xi:>^SL, Ms = MAC 30 
^fBB!c-r^,1@Sm2 04f@cr)«:feffi>'W h t^ft^o CCD 
cl i:(iX-r>y:/L30 (Cg^nTV^^I,., SIM;0- F(i 
aSAd^^fiitU (Xx7:'"L32). cniiftfCfWSfSO 
/c:i6icf^:btii.o ^LTi)mc;<3-K«. SldM).M 
s.Rt;SfLl^aS(Ad^, Sig*gH{C3MtBt-5 (X-f -y^ 

L33)„ ^mmus ^sttisst*. is^sBfi^©^^ 

tt^-^^DTl^fft®^ f^tJ-fe : mr= Alg» (Ac.Ks) . ^ 
i5^g*T'fiijit/cSStffiAcSa'KstcS-:5l,^T : m2' = A 
lg» (SSiSi (+) ml.Ks) , ^ SIMOJItttlL/c^mtcS 
-iiV^T ; Mlt^Sit-'S C iltCcfcoTfi'llllg-r^o Ms' =m2' 40 
©4<io®feffi-'W h. tJ&So «:oiii:{iX'r-y:^4 
8 {Cg^tlTV^^o :^^l^T'Xf-'y7l(50 T\ Ms' tMs 

{iilfl*^4'ir5n§ (Xf--y:/K5i)o ^^tccoc tti 
^lE^SH A WWtc iift ©Stiz^^BItEtc -r 
SA^SSo '^(C (Xx>y7T(52)li^$n§!f^[$Db/()'!. X 
X "J -fUl T'Sit SJo /c/ ^ ^i:a-5v^TItW^ n 
§o C<D?iii5Dbi:ffi'>*»i:<0l:tl$ (X^^-y 7K54)tc<]; 
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»?$ni.:fee.{fXT"y:/K55 {cf7<o aiiAmijt^n§ 

* e. Xx -y TKSetCfT t , ^ C T'^iS[0SLDO#jaTA^ 

Ad^EliUv '^l!3co;f;t^Mili:|Rju<?iJffl-r^o 

[0 0 2 9] ^4(7)7x-X<O7a-^i'-h«06fC 

fo c<07x-X{i^'g)|«ifeiN-**W^^nd;'5i:-rs 
^KtcX^-F-rS (Xr-yyK60)o CCDF^ji&ti, «ilJx. 

SStCd;oT^^nSo i«^MmiXx<y7'K62 TlJiW 
^tlSraff (lOOMAOtCckoTKS^nTl.^So 

:/K64)o ^CTii. Jl^^n/c+'fKs (Xf--yyL50){C 
yLWv^TliEBOTMd';b':?iii6?.n (Xr-y T'LSl)^ ^n*< 
ffi5R^B*^e.iMtB^n/cliEW«Md tJ:b«$n5 (XT 
-y:/L55)„ l:t«<D)f5**^M{!f:&b(fXr-yyL60 {Cit 

i':'-X©Sj*e,(f*-K{i7P-yi'$n§ (Xr-yT'Le 

3)o tL?i;gA<:/'5x<DSg(^5>{fMe.<DMgt,tTt)ti* 

v\ KA-FtiOKtaW^tlT (Xr>y :/L65)> -en 

[0 0 3 0] ^bt^hmmmst. Z.<r>sM (Xx-y 
7K65)«rlS^f ?iCi:tCj;t)|5 SIM*- FA^*5<ljT-$i§ 

T\ jHi«ff±-r^ (X-r'y7K66)o tL SIM*-F*^ 

nr. TOii^D|pI^I;^^-i^g^ni)„ Ko^i^ossnA^n 

tT^ftl (Xx-y:/K70)^IS0SLD«X'r-y7K75 T'Mif^ 

)aifS(*«'±-r 5 (XT -y 7K7i)o 

[00 3 1] imm.t CSHS<D:^.-y F 7-^Jii^r|.o^ 

»s ^fC11fg#.-y Fy-^-. DCS 1800^-ryOT-^e 
iI4^>yF7-^. |lilKXtiliJi2«ligiiAl*g!B (i^^«BS 
«) , 7r^'>5U. T-^fXtiH^eJMJS^SB. I? 

[0ffi©ffim^itt^] 

[01] igHi> ^fSwtciSi/XTA^s^-rniT'fe 

So 

[02] 02(i. ig Hc^-rs/XTAtcji-rsjJS^jgfti 

[1113] 03ii. *fgHflfc<};§->XTAOiiWf)f'P^|{J 
[0 4] El 4 (i, *5gB^(c«i:Sv'XTi:«cOj|^»fj{^^tJi 

B/jfs c t ^itm bfcjg 2co7o-f--\'-F ^^-riaT 
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